Loading...

Knowledge Center


ePolicy Orchestrator 4.x installation/patch upgrade checklist for known issues
Technical Articles ID:  KB71825
Last Modified:  7/22/2015
Rated:


Environment

McAfee ePolicy Orchestrator (ePO) 4.x

Summary

The following is an upgrade checklist for known issues with full product installations and patch upgrades for ePO 4.x.

Intel Security recommends that you perform these operations directly on the ePO server and not through a remote connection. If you must use a remote connection, ensure that you are connected using the console session (session 0).

General tasks:

Review the product or patch release notes for new features
For a full list of product documents, go to the ServicePortal at: http://support.mcafee.com. Click Knowledge Center, and select Product Documentation from the Knowledge Base list.
 
Review the product or patch known issues article
To generate a dynamic list of ePO known issues articles, use the following saved Knowledge Base search: http://mcaf.ee/d9hw4.
 
Tasks to perform on the ePO server:

Back up your ePO server
For more information, see KB66616.
 
Ensure that the ePO server has enough hard disk space for the upgrade
  • System temp drive - Requires 2 GB or more of free disk space
  • ePO installation drive - May require up to three the size of the McAfee\ePolicy Orchestrator folder or 20 GB, whichever is greater

    NOTE: If the ePO server is installed on the same drive as the system temp folder and the ePO installation directory is 15 GB in size, the required available hard disk space in the C drive will be more than 45 GB to account for the system temp folder. In that scenario you would need 15 GB X 3 GB + 2 GB = 47 GB of free space. In the same scenario, if the ePO installation directory is 2 GB in size, the minimum size requirement means that the drive must have 20 GB + 2 GB = 22 GB of free space.
Ensure that the 8.3 naming convention is enabled
It is required that the 8.3 naming convention is enabled. For instructions to enable the 8.3 naming convention, see Solution 1 in KB51431.
 
Before you upgrade the McAfee Agent extension or before the next ASCI immediately after the extension upgrade, disable any tasks configured to install the McAfee Agent that are scheduled to Run Immediately
When you check in a new McAfee Agent extension on the ePO server, previously executed tasks that are configured to run immediately execute again at the next scheduled Agent-to-Server Communication Interval (ASCI). This can cause various products to be redeployed to clients if the deployment task was scheduled to run immediately. To prevent this issue, before you upgrade the McAfee Agent extension or before the next ASCI immediately after the extension upgrade, disable any tasks configured to install the McAfee Agent that are scheduled to Run Immediately. For more information, see KB74420.

Disable ePO server tasks and any Windows scheduled tasks that may be set to run on the ePO server
Disable any tasks that would interfere with the installation (such as purge events, pull tasks, and replication tasks).

For information on editing tasks, see the ePolicy Orchestrator 4.6 Product Guide (PD22975).

Disable Windows updates
Disable Windows updates to ensure they do not interfere with your ePO installation or upgrade. For more information, see http://windows.microsoft.com/en-US/windows-vista/Turn-automatic-updating-on-or-off.

Disable third-party software
Disable any software that automatically restarts services on your ePO server. This includes disabling monitoring software (such as Microsoft System Center Operations Manager) that might affect the ePO services starting and stopping for the duration of the installation or upgrade.

Export your current policies
Use the Export function in ePO to back up your existing policies. For information about exporting policies, see the ePolicy Orchestrator 4.6 Product Guide (PD22975).

Enable TCP/IP on the ePO server
  1. Click StartRun, type Cliconfg, and click OK.
  2. Ensure the TCP/IP protocol is Enabled and at the top of the Enabled protocols by order list.
Tasks to perform on the SQL server (may be the same as the ePO server if you chose to install SQL Express bundled with ePO):
 
Ensure correct account permissions
The account used to access the SQL server must have the following permissions:

Default database must be master:
  1. Click Start, Programs, Microsoft SQL Server, SQL Server Management Studio.
  2. Expand Security, Logins
  3. Right-click the account and select Properties.
  4. Ensure the default database is set to master.
  5. Expand User Mapping and ensure that the account has dbo in the schema for the database.
This account must be the db_owner in the database security properties:
  1. Click Start, Programs, Microsoft SQL Server, SQL Server Management Studio.
  2. Expand Databases, your ePO database, Security, Users.
  3. Right-click the dbo account and select Properties
  4. Ensure that the account has dbo in the Default schema for the database.
If you use an NT account to authenticate to the ePO database, ensure that the account has Local Admin rights on the ePO server.

See KB75766 for detailed information on the required SQL permissions.
 
Ensure Auto Close is set to False for the ePO database
  1. Click Start, Programs, Microsoft SQL Server, SQL Server Management Studio.
  2. Right-click the ePO database and select Properties.
  3. Click Options and ensure Auto Close is set to False. If it is not, click Auto Close, select False, and click OK.
Ensure Arithmetic Abort Enabled is set to True for the ePO database
  1. Click Start, Programs, Microsoft SQL Server, SQL Server Management Studio.
  2. Right-click the ePO database and select Properties.
  3. Click Options and ensure Arithmetic Abort Enabled is set to True. If it is not, click Arithmetic Abort Enabled, select True, and click OK.
Verify the correct DB collation is set on the SQL server
ePO uses SQL_Latin1_General_CP1_CI_AS as the default collation for the database when an upgrade or fresh installation of ePO is performed.

To verify collation in SQL Server:
  1. Click StartProgramsMicrosoft SQL ServerSQL Server Management Studio.
  2. Log on to the server using Windows Authentication or SQL Server Authentication, as applicable.
  3. In Object Explorer, expand Databases, and locate the ePO database.
  4. Right-click the ePO database and select Properties.
  5. Review the Collation field in the General page.
See KB73717 for detailed information on supported collation types for ePO. 
 
Ensure the SQL browser service is running
  1. Click Start, Run, type services.msc, and click OK.
  2. Locate the SQL Server Browser service and ensure that it is started and running.
  3. If it is not, right-click the SQL Server Browser service and select Start.
Ensure SQL Force Encryption is disabled in SQL server environments, if it is enabled
  1. Click Start, All Programs, Configuration Tools, SQL Server Configuration Manager
  2. Right-click Protocols for <instance_name> (MSSQLSERVER by default) under SQL Server Network Configuration and click Properties.
  3. Click the drop-down list for Force Encryption and select No.
  4. Click OK.
Final Considerations:
 
In a pure IPv6 environment, ensure that only IPv6 is enabled on the SQL server that hosts the ePO database.

Review documentation correction article 
KB83298 regarding stopping ePO services on remote Agent Handlers instead of disabling them in the Handler List page.
 
Ensure that the ePO admin and SQL account usernames and passwords meet the criteria described in KB66286.

Perform a preventative measure to avoid Tomcat failing to stop
Perform this step only when you are ready to start the installation.
  1. Click Start, Run, type services.msc, and click OK.
  2. Stop the ePolicy Orchestrator Server Service and ePolicy Orchestrator Event Parser Service.
  3. Restart the ePolicy Orchestrator Application Server Service.
  4. Right-click the installer setup.exe and run it as an administrator.

Rate this document

Did this article resolve your issue?

Please provide any comments below

Beta Translate with

Select a desired language below to translate this page.

Glossary of Technical Terms


Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.